Open-webui vulnerabilities
175 CVEs and advisories name Open-webui as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-45386Open WebUI: An IDOR vulnerability exists in the pin_channel_message API endpoint
- CVE-2026-45398Open WebUI: IDOR - Retrieval API Bypasses Knowledge Base Access Controls
- CVE-2026-45397Open WebUI: Unauthenticated RAG Configuration Disclosure
- CVE-2026-45396Open WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data Manipulation
- CVE-2026-45395Open WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code Execution
- CVE-2026-45387Open WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage)
- CVE-2026-45385Open WebUI: An IDOR vulnerability exists in the update_message_by_id API endpoint
- CVE-2026-44721Open WebUI: Stored XSS via Model Description
- CVE-2026-44550Open WebUI: Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts
- CVE-2026-44551Open WebUI: LDAP Empty Password Authentication Bypass
- CVE-2026-44552Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning
- CVE-2026-44553Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access
- CVE-2026-44554Open WebUI: Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overwrite
- CVE-2026-44555Open WebUI: Base Model Routing Bypasses Access Control via Model Chaining
- CVE-2026-44556Open WebUI: responses passthrough endpoint lacks access control authorization
- CVE-2026-44557Open WebUI: Global Knowledge Base Enumeration via knowledge-bases Meta-Collection
- CVE-2026-44558Open WebUI: Channel Access Grants Bypass filter_allowed_access_grants
- CVE-2026-44559Open WebUI: Missing Access Check on Channel Members Endpoint for Standard Channels
- CVE-2026-44560Open WebUI: Unauthorized File and Knowledge Base Content Access via RAG Vector Search
- CVE-2026-44561Open WebUI: Deactivated Channel Members Retain Full Access to Group/DM Channels
- CVE-2026-44562Open WebUI: Model Import Overwrites Any Model Without Ownership Check
- CVE-2026-44563Open WebUI: Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/show
- CVE-2026-44564Open WebUI: Read-Only Users Can Modify Collaborative Documents via Socket.IO
- CVE-2026-44568Open WebUI: Stored XSS in Pending User Overlay via Incorrect DOMPurify Application Order
- CVE-2026-45331Open WebUI: Full SSRF Vulnerability in the RAG Web Search Feature
- CVE-2026-45339Open WebUI: API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpoints
- CVE-2026-45349Open WebUI: Broken Access Control for Completions API
- CVE-2026-45399Open WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing system-wide chat disruption
- CVE-2026-45671Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion
- CVE-2026-45675Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts